Your details.
With a clear purpose.

Who is responsible

The data controller is DM SOFT IKE, VAT ID 801306037, 47 St. Kazantzidi, 55535 Thessaloniki. For privacy matters: [email protected] or 2312 20 20 22.

What information we need

We record the details you enter: contact, business, billing and installation details, service choices and messages. We also retain acceptance of terms, rental progress, payments and related notifications. Required fields are necessary to handle your request.

Technical connection data, such as your IP address, is processed for website security. Do not send card details or sensitive personal data in message fields.

For what purpose

We use the information to respond, prepare and perform the rental agreement. For business representatives and service protection, we rely on our legitimate interest in secure operation and communication. Necessary accounting records are retained for our legal obligations.

We do not use form details to subscribe you to a marketing list. We do not make exclusively automated decisions to suspend service. Optional advertising features based on website visits are described below.

Card payments

You can pay by card using the personal link we send you. Card details are entered directly in payment provider EveryPay's secure form, in accordance with its privacy policy. Only Kiosk retains transaction references, amounts and statuses to confirm payments and refunds, not your full card number or CVV. You initiate each payment; we do not store authorisation for automatic monthly card charges.

Who has access

Access is limited to authorised DM SOFT personnel and, as necessary, infrastructure and email providers (Amazon Web Services), website security (Cloudflare), payments (EveryPay) and the relevant accounting partners. Data is disclosed to authorities when required by law.

The primary database is hosted in Ireland. Some providers operate internationally. The processing terms of AWS and Cloudflare describe safeguards for transfers outside the EEA, such as applicable standard contractual clauses. You can request information about our processing at [email protected].

How long we retain data

Contact or partnership enquiries without a contract, and unpaid rental applications that were not activated, are retained for 12 months from the last communication, provided no issue remains outstanding. They are then deleted or anonymised.

Active and completed rental records are not deleted when those 12 months end. Retention is linked to the contract, equipment return, resolution of outstanding issues and tax obligations or legal claims.

Cookies and personal link

We use necessary session storage for secure submission and your personal application link, along with security mechanisms for forms and admin access.

The personal link allows you to track and pay for your application. Do not share it. Form security checks are also covered by Cloudflare's privacy policy.

Optional analytics and advertising cookies

You choose website analytics, advertising measurement and personalised ads separately. Without consent for any purpose, the Google tag does not load. Accepting one purpose does not enable the others.

Website analytics: with your consent, Google Analytics 4 records visits to public pages, traffic sources, successful enquiries without form contents, and technical browser and device information. We use this information to understand website traffic and link the reports to Google Ads to measure performance. This choice does not enable personalised ads. Analytics cookies have a maximum lifetime of 180 days.

Advertising measurement: helps us understand which ads lead to successful contact, rental or purchase enquiries. Google may process ad-click identifiers, cookies and browser local storage, technical connection and device information, and the submission event.

Personalised ads: with separate consent, Google may use your visit to public pages and cookie or device identifiers to include you in a visitor audience. This allows Only Kiosk ads to be shown to you on Google, YouTube and partner websites (remarketing). Audience membership lasts up to 90 days from your most recent consented visit.

We do not send form fields, names, email addresses, phone numbers, card details or personal application links to Google. The tag does not load on personal application, payment or admin pages. We do not use Google Signals, automatic form-field collection or customer contact lists for targeting.

Choose “Necessary only” to use the website normally without these features. Your preferences are stored on your device for up to 180 days and can be changed at any time through “Cookie settings” at the bottom of the page. Withdrawal stops future use for the relevant purpose without affecting the lawfulness of earlier processing. Previous acceptance is not consent for a new purpose.

Google Ireland Limited provides the service in the EEA. Information on cookies, retention periods and international transfers is included in Google's information for partner websites and in Google's privacy policy.

Your rights

You may request access, correction, deletion, restriction, objection and, where applicable, data portability. Send your request to [email protected], stating the type of request and your application number, if available. We may need the minimum necessary information to confirm your identity.

You also have the right to complain to the Hellenic Data Protection Authority.